← Back to home

Privacy Policy

Data controller

The data controller is HEIÐRUN Production. For any questions regarding your personal data, you can contact us at: contact@heidrunproduction.com.

Cookies used

This site exclusively uses cookies that are strictly necessary for the operation of the site. No advertising, analytics, or tracking cookies are used.

  • admin_session — Authentication cookie for the administration area. Duration: 30 days. HttpOnly, Secure, SameSite=Lax.
  • group_session_[slug] — Authentication cookie for a band's management area. Duration: 30 days. HttpOnly, Secure, SameSite=Lax.
  • cookie_notice_seen — Records that the cookie information banner has been seen (localStorage, not sent to the server).

As these cookies are strictly necessary for the operation of the site, they do not require your prior consent under the ePrivacy Directive.

Data collected

This site does not automatically collect any personal data. No traffic analysis, tracking, or advertising tools are used.

The only personal data processed is:

  • Images uploaded by bands — Band members can upload photos via a password-protected area. These images are stored on the server and subject to moderation before publication. They can be deleted upon request.

Hosting

The site is hosted on a dedicated server. Data is stored in a local database (SQLite) on this server. No data is transferred to third-party services, except for sending emails if an SMTP service is configured.

Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access to your personal data
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability

To exercise these rights, contact us : contact@heidrunproduction.com.